![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/qaoOHo7IK32pHEhXhOIRLLtba6E.roa
File: qaoOHo7IK32pHEhXhOIRLLtba6E.roa (raw, json)
Hash identifier: sorwQuZ/RLLCgJTNWowCIfCTHfcibM0qOnELaIucpFw=
Subject key identifier: A9:AA:0E:1E:8E:C8:2B:7D:A9:1C:48:57:84:E2:11:2C:BB:5B:6B:A1
Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial: 0A5B
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/qaoOHo7IK32pHEhXhOIRLLtba6E.roa
Signing time: Thu 15 Sep 2022 02:44:13 +0000
ROA not before: Thu 15 Sep 2022 02:44:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131593
IP address blocks: 43.251.60.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2651 (0xa5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Validity
Not Before: Sep 15 02:44:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A9AA0E1E8EC82B7DA91C485784E2112CBB5B6BA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:55:e9:97:39:a7:ac:31:95:3b:21:87:85:
87:d0:fc:12:8e:e4:71:cd:94:df:04:64:15:2b:2c:
b0:b4:82:81:3e:64:ca:e9:a0:07:1b:1b:83:f4:99:
8b:e4:48:59:63:1c:3a:85:10:88:63:55:2d:6e:a8:
04:62:3d:7f:bf:fb:72:c3:3c:74:b5:a6:8d:87:fb:
e3:9d:c5:0a:5c:e0:d3:f8:75:ed:a2:d7:d1:40:42:
21:ff:ab:0c:44:d6:97:cb:94:ad:c6:c8:ca:7a:95:
d2:26:2a:7f:af:4d:18:87:44:78:a9:3d:a7:75:f0:
cb:4c:58:ca:0e:f0:da:5f:82:3c:33:46:98:43:71:
16:07:2c:f3:ae:53:80:c7:2d:cd:aa:1b:99:c2:23:
53:10:16:ed:4f:b3:73:3e:e3:2a:62:49:60:ba:23:
c9:59:0d:87:2c:84:33:d9:9b:83:2b:2d:ca:3c:60:
0b:42:ee:67:06:05:53:af:49:1a:f0:d0:f8:5f:91:
55:f2:d7:85:98:ea:bf:a5:8d:44:f7:9b:22:d2:6f:
e9:93:6a:7e:d8:55:04:c4:b6:81:f0:7c:af:41:39:
4e:15:36:7d:42:59:a3:7d:04:34:bb:c6:d4:7e:13:
87:a5:7a:39:7f:12:07:62:12:b1:87:b4:24:c4:5d:
50:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AA:0E:1E:8E:C8:2B:7D:A9:1C:48:57:84:E2:11:2C:BB:5B:6B:A1
X509v3 Authority Key Identifier:
keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/qaoOHo7IK32pHEhXhOIRLLtba6E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.60.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:d9:02:05:b9:68:4c:1b:58:e0:39:3f:4e:06:ec:3a:1b:65:
11:48:35:8f:6c:21:0e:c6:e5:57:fe:d6:7b:69:d1:c8:c3:16:
30:24:91:58:80:98:fe:f7:83:fa:6e:23:0a:00:17:66:b6:1a:
96:15:93:40:07:35:e1:b4:c9:9a:1c:f8:66:d6:c4:8c:00:30:
10:81:73:8b:5c:8e:a2:59:59:d3:0a:fa:92:2e:64:8f:22:7c:
62:a4:34:f2:5b:34:00:e9:a2:bc:b6:95:9c:c5:9a:75:13:c5:
65:23:b4:63:1c:ca:ee:89:1e:fb:35:42:12:25:7f:92:a1:77:
f1:f4:5c:f6:b1:46:4f:ac:25:e5:dc:99:c2:7e:97:c5:b7:51:
f9:03:ba:64:71:b1:3f:9f:0e:c7:36:ef:5f:56:0a:8c:1e:76:
fb:4b:39:b3:7f:ee:b3:9d:7a:f5:e7:42:ad:66:5c:7f:fa:66:
ab:1a:34:65:2b:c6:d7:ff:47:e7:e6:52:43:38:79:20:3c:00:
ba:e8:3d:1e:11:03:76:ba:50:7c:db:61:08:35:f0:6e:a2:e3:
f2:34:d3:60:d1:87:02:6b:b3:e0:b7:0a:d6:f6:74:92:a2:04:
e8:da:6e:ae:e0:6c:f0:24:95:f4:50:5c:e3:df:c7:13:ed:f8:
9c:c4:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:42 2025 by rpki-client